The computer security community of today can be compared to the American Wild West once upon a time; no real law and order and a lot of new citizens. The terms and classification schemes used in the computer security field today are not standardised. Thus the field is hard to take in, there is a [...]
Actual and Perceived Information Systems Security
As the Internet becomes the major information infrastructure in most sectors, the importance of Information Systems (IS) security steadily increases. While reaching a certain level of actual IS security is vital for most businesses, this level must also be perceived as acceptable by stakeholders. Businesses have to maintain a certain level of security and be [...]
A Method for Assessment of System Security
With the increasing use of extensive IT systems for sensitive or safety-critical applications, the matter of IT security is becoming more important. In order to be able to make sensible decisions about security there is a need for measures and metrics for computer security. There currently exist no established methods to assess the security of [...]